00:00:11 <jmk_away> not with a sloppy sudo policy
00:00:17 <cradek> right.
00:01:01 <cradek> I'm certainly open to discussing changes but I think it might be fine the way it is now
00:01:10 <jmk_away> and that is?  
00:01:21 <cradek> it locks and unlocks when you tell it to
00:01:23 <jmk_away> (did you remove the requirement that you be root to set/remove HAL locks
00:01:32 <jmk_away> )?
00:01:35 <cradek> well there's no such thing as "being root" now
00:01:46 <cradek> halcmd has the ability to invoke and revoke its root privs
00:02:14 <jmk_away> so it doesn't know or care whether the person running it is root (or sudo)
00:02:15 <jmk_away> ?
00:02:28 <cradek> well it doesn't care; it's not true that it can't know
00:02:33 <cradek> now that I think about it
00:02:53 <cradek> it could check the real (not effective) uid
00:02:58 <jmk_away> that would get into policy anyway...
00:03:12 <cradek> again I was thinking only along technical lines, not administrative, so I was thinking the real uid didn't matter
00:03:38 <jmk_away> some folks may want no locks, some would be content to lock for accident protection, some would want real, user based locking to prevent bored operators from tweaking or sabotage
00:03:40 <cradek> so we could still make that administrative policy if we want
00:04:12 <jmk_away> its dinner time, will you be around later?
00:04:15 <cradek> a bored operator could still throw his sabos into the machine, or more likely use wire cutters
00:04:30 <cradek> yes
00:04:42 <jmk_away> bored operators don't want to get fired
00:04:55 <jmk_away> wire cutters leave traces
00:04:59 <jmk_away> anyway, I'll think about it
00:05:03 <cradek> yeah, maybe we have to protect against the tinkerer
00:05:07 <jmk_away> probably no need to do anything now
00:05:10 <cradek> dunno...
00:05:12 <jmk_away> talk to you later
00:05:14 <cradek> ok then
00:05:15 <cradek> bye
00:13:33 <jmk_away> hmm, its gonna be hard to protect against the tinkering operator... if we assume that the operator can exit from emc, then they must be able to remove any locks
00:13:47 <cradek> you're supposed to be eating
00:13:58 <jmk_away> lasagna is cooling off
00:14:09 <thalx> thalx has quit
00:14:10 <jmk_away> just out of the oven, mouth-burning hot
00:14:11 <cradek> yum maybe I should go get italian food
00:15:00 <paelscrit> * paelscrit cries
00:15:28 <cradek> jmk_away: we can just put it back, I'm fine with it as long as we comment in the source that it's an administrative, not technical, requirement
00:15:38 <cradek> jmk_away: that's all that was confusing to me
00:16:45 <cradek> is tkemc still all blue nowadays?
00:17:20 <jmk_away> cradek: until we have a good plan, lets just let anyone invoking halcmd set/remove locks
00:17:34 <cradek> jmk_away: ok, I think that's the way it is now
00:17:38 <jmk_away> yes, tkemc is still blue
00:17:47 <cradek> hmm, it sure isn't on my system
00:17:56 <cradek> I wonder if that has something to do with "themes"
00:18:05 <jmk_away> well, it was the last time I ran it (a few days ago I think)
00:18:11 <jmk_away> dunni
00:18:14 <jmk_away> dunno even
00:18:22 <cradek> it's never been blue on my ubuntu
00:18:36 <jmk_away> oh, I got a question: when/how does halcmd get setuid?
00:18:56 <jmk_away> if a non-root person compiles it and runs in place, how does it insmod the modules?
00:19:06 <jmk_away> likewise for module-helper
00:19:09 <cradek> when you build, it uses sudo to change it to suid
00:19:16 <cradek> same with the helper
00:19:19 <jmk_away> during make, not make install?
00:19:25 <cradek> right
00:19:31 <cradek> I haven't sorted out how that should work
00:19:37 <jmk_away> (I'm familiar with "anyone can make, gotta be root to install)
00:19:52 <cradek> run-in-place might be slightly messed up today (require sudo to run)
00:20:00 <cradek> I'm not sure how run-in-place should work in this respect.
00:20:14 <jmk_away> lets talk about it after food
00:20:19 <cradek> ok
00:20:28 <jmk_away> (I think the lasagna is eatable now - go get something good!)
00:20:31 <cradek> would be nice if alex were around too
00:20:36 <cradek> ok, I will
00:20:42 <jmk_away> he's sleeping
00:21:50 <cradek> I know...  you two are rarely around at the same time, which is unfortunate
00:47:16 <Jymmm> Jymmm is now known as Jymm
00:48:57 <Jymm> Jymm is now known as Jymmmm
01:08:22 <rayh> rayh has quit
01:23:56 <jmk_away> I'm not a morning person...
01:40:22 <jepler> cradek: When things aren't meant to run in-place, make should call install with the proper permissions
01:40:43 <jepler> cradek: there should probably be an "emc" group created by the package, and the setuid programs would be g+x,o-x
01:41:29 <jmk_away> hi jepler
01:41:35 <jmk_away> I think cradek wandered away
01:41:51 <jmk_away> I was mumbling things at him on the same subject on the dev channel
01:42:07 <jepler> is that called #emc-dev or #emc-devel?
01:42:11 <jepler> maybe I should head over there
01:42:18 <jmk_away> #emc-devel
01:42:26 <jmk_away> he is away there too ;-)
01:42:39 <jepler> well sure
02:36:20 <cradek> I'm back...
02:41:26 <jepler> hi 
02:43:09 <cradek> I'm monologueing in -devel
02:43:20 <cradek> (and I think I just made a new word)
02:45:43 <jepler> Results 1 - 10 of about 734 for monologueing.  </google>
02:45:54 <cradek> drat
02:45:57 <cradek> always fails
02:46:41 <jepler> PregnancyCrawler
02:46:41 <jepler> ... I only use him for his computer knowledge and monologueing skills. Monologueing:
02:46:44 <jepler> The ability to write a monologue. ... monologueing is kind of scary to spell... ...
02:46:46 <jepler> www.pregnancycrawler.com/modules.php?name=Forums&file=viewtopic&p=288
02:46:51 <jepler> * jepler laughs at the domain name
02:49:17 <CIA-17> 03cradek * 10emc2/src/module_helper/ (Makefile module_helper.c): a bit of cleanup, plus only keep the privs we need to make the code safer.
02:50:45 <SWP_Away> SWP_Away is now known as SWPadnos
03:11:26 <wb9mjn> wb9mjn has quit
03:15:10 <CIA-17> 03cradek * 10emc2/src/hal/utils/Makefile: what was I thinking?
03:19:53 <CIA-17> 03cradek * 10emc2/src/Makefile: target for setting setuid bits for run-in-place
03:22:12 <CIA-17> 03cradek * 10emc2/src/Makefile: setuid only for me (in the case of user groups) or my primary group (at worst)
03:27:35 <CIA-17> 03cradek * 10emc2/src/Makefile: don't require sudo
03:29:28 <CIA-17> 03jepler * 10emc2/src/module_helper/tests: this script tests for some things that helper should and should not do
03:31:38 <CIA-17> 03jepler * 10emc2/src/module_helper/.cvsignore: bliss
03:37:16 <CIA-17> 03jepler * 10emc2/src/module_helper/module_helper.c: 
03:37:16 <CIA-17> factor out the common "check string against whitelist" code and use it
03:37:16 <CIA-17> check the extension of the module name when inserting, and mention the
03:37:16 <CIA-17> permitted extensions in the help
03:41:00 <CIA-17> 03jepler * 10emc2/src/module_helper/module_helper.c: ensure that the whitelisted extension is at the end of the string
03:41:24 <CIA-17> 03jepler * 10emc2/src/module_helper/tests: revise tests: don't make all tests fail because of the .. test, and test for different extensions
03:42:19 <CIA-17> 03jepler * 10emc2/src/module_helper/module_helper.c: fix swp's font problem
03:43:06 <SWPadnos> heh
03:57:20 <jepler> night guys
03:57:30 <jepler> jepler has quit
04:13:28 <CIA-17> 03cradek * 10emc2/tcl/bin/setupconfig.tcl: I meant this
04:29:44 <Jymmmm> Jymmmm is now known as Jymmm
04:49:06 <CIA-17> 03cradek * 10emc2/scripts/ (realtime.in realtime): have configure process realtime
04:49:47 <CIA-17> 03cradek * 10emc2/src/Makefile: have configure process realtime
04:50:53 <CIA-17> 03cradek * 10emc2/src/ (configure configure.in): have configure process realtime, which fixes run-in-place.
04:51:43 <CIA-17> 03cradek * 10emc2/scripts/realtime: have configure process realtime
05:11:28 <CIA-17> 03cradek * 10emc2/src/ (configure configure.in): for some reason bdi needs this
05:33:55 <CIA-17> 03cradek * 10emc2/src/ (configure.in configure Makefile): 
05:33:55 <CIA-17> Developers: one extra step required for run-in-place.
05:33:55 <CIA-17> I bet even with this message in two places we'll see posts on the
05:33:55 <CIA-17> list from people who don't see it.
06:35:44 <cradek_> cradek_ has joined #emc
06:35:44 <cradek> cradek has quit
06:58:59 <jmk_away> jmk_away has left #emc
07:07:14 <fenn> arg why was this so hard to find when i was looking for it? http://sourceforge.net/projects/viewstl/
07:18:17 <Jymmm> what is it
07:18:30 <fenn> an stl file viewer
07:18:33 <fenn> for linux
07:18:34 <Jymmm> ah
07:18:42 <Jymmm> whats linux
07:18:43 <Jymmm> ?
07:19:01 <fenn> a cultish religion from northern europe
07:19:56 <Jymmm> lol, that's pretty good.
07:27:47 <Jymmm> fenn how ya doin?
07:30:01 <fenn> well, its the first day of a new year.. sure doesnt feel like it
07:34:45 <Jymmm> woof!
07:35:27 <fenn> i've listened to this song about 10 times today http://fenn.dyndns.org/pub/mp3/Juno Reactor - Complete Discography (1992-2004)/Juno Reactor - Transmissions (1993)/06. Juno Reactor - 10,000 Miles.mp3
07:36:11 <Jymmm> never heard of it
07:36:20 <fenn> juno reactor is the shizzle
07:43:06 <Jacky^afk> Jacky^afk has quit
07:43:11 <Jacky^afk> Jacky^afk has joined #emc
08:06:50 <Jymmm> Jymmm is now known as Red70sShow
08:06:50 <Red70sShow> Red70sShow is now known as Jymmm
09:17:19 <Jymmm> Jymmm has quit
10:24:09 <Jacky^afk> Jacky^afk is now known as Jacky^
22:15:52 <logger_aj> logger_aj has joined #emc
22:15:52 <clarke.freenode.net> topic is: "Welcome to the Enhanced Machine Control forum - Support and development of a linux based CNC control. | Home:www.linuxcnc.org | Regular Developers' meetings every Sunday 14:00-18:00 GMT | wiki up @ http://wiki.linuxcnc.org | EMC usage map: http://www.frappr.com/emctheenhancedmachinecontroller"
22:15:52 <clarke.freenode.net> Users on #emc: logger_aj k4ts acemi sed_ rayh Jymmm _tarzan_ jepler Jacky^ cradek paelscrit A-L-P-H-A @ChanServ lerman SWPadnos LawrenceG Ephexis fenn picnet djb_rh bill2or3 CIA-17 ccjoe alex_joni bill20r3 jtr_ robin steves_logging websys ValarQ 
22:16:02 <Jacky^> or, maybe is also possbile
22:16:13 <Jacky^> but you lost a lot of money
22:16:23 <bill20r3> yep, you just have to start over.
22:21:10 <Jacky^> bill20r3: this is a machine I like http://www.lmwatts.com/cnc.html
22:21:37 <Jacky^> My first interest is to work on wood
22:22:18 <Jacky^> actually its very hard to find good materials (wood)
22:22:28 <Jacky^> and good jobs
22:22:43 <Jacky^> i'm pointing at quality
22:22:53 <Jacky^> dunno what will happen ..
22:23:56 <Jacky^> there are not so much peoples around understanding high quality jobs
22:24:22 <Jacky^> at least, here ..
22:28:48 <bill20r3> what sort of wood do you prefer to work with?
22:29:12 <Jacky^> it does not depend on wood type
22:29:26 <Jacky^> it depend on ow it is 'seasoned' ..
22:29:48 <Jacky^> you know, the wood should stay years after cutted 
22:30:02 <Jacky^> actually, its ready after 3 months
22:30:16 <Jacky^> but.. ready for what ?
22:31:12 <Jacky^> its an ancient art
22:31:15 <bill20r3> ahh.  I guess you cang just go down to the local lumber yard and ask for a block of maple.
22:31:29 <bill20r3> s/cang/cant/
22:31:45 <Jacky^> wood has his secrets
22:31:56 <Jacky^> as the pizza :)
22:32:37 <Jacky^> it cand be bad or good , cheaper or expensive
22:32:53 <CIA-17> 03jepler * 10emc2/tcl/bin/setupconfig.tcl: 
22:32:54 <CIA-17> add some options that improve the look of the pages: use a non-bold font, and use a white background for several widgets
22:32:54 <CIA-17> left-justify most text, instead of centering it.
22:32:54 <CIA-17> on the page that creates backups, add a button to show the standard "save as" file browser
22:32:54 <CIA-17> when loading the logo, stop after one variant was found
22:33:25 <k4ts> night
22:33:47 <Jacky^> night k4ts 
22:33:54 <k4ts> k4ts has quit
23:19:59 <_tarzan_> _tarzan_ has quit
23:21:17 <Jacky^> night
23:21:23 <Jacky^> Jacky^ is now known as Jacky^afk
23:34:48 <LawrenceG> LawrenceG has quit
23:35:27 <LawrenceG> LawrenceG has joined #emc